Oracle 1Z0-1104-26 Certification Sample Questions and Answers

1Z0-1104-26 PDF, 1Z0-1104-26 Dumps PDF Free Download, 1Z0-1104-26 Latest Dumps Free PDF, Cloud Infrastructure Security Professional PDF DumpsThe Oracle Cloud Infrastructure Security Professional (1Z0-1104-26) Sample Question Set is designed to help you prepare for the Oracle Cloud Infrastructure Certified Security Professional certification exam. To become familiar with the actual Oracle Certification exam environment, we suggest you try our Sample Oracle 1Z0-1104-26 Certification Practice Exam.

This Oracle Cloud Infrastructure Security Professional certification sample practice test and sample question set are designed for evaluation purposes only. If you want to test your Oracle 1Z0-1104-26 knowledge to identify your areas of improvement and get familiar with the actual exam format, we suggest you prepare with the Premium Oracle Cloud Infrastructure Certified Security Professional Certification Practice Exam. Our team of Oracle Cloud Infrastructure experts has designed Questions-Answers for this premium practice exam by collecting inputs from recently certified candidates. Our premium Oracle 1Z0-1104-26 certification practice exam will boost your confidence as well as your actual Oracle Cloud Infrastructure Security Professional exam result.

Oracle 1Z0-1104-26 Sample Questions:

01. Security alerts raised in OCI have to reach the company's existing incident-management platform, which exposes an HTTPS endpoint and does not poll anything. The team will not write or operate any code for the integration.
Which delivery path meets these conditions?
a) An Events rule that posts straight to the platform's own endpoint
b) A Notifications topic with an HTTPS subscription
c) A Streaming action the platform reads on a schedule
d) A Function invoked by the rule that calls the platform's API
 
02. An operations team runs its nightly batch jobs on Compute instances in the Batch compartment, and those instances call OCI APIs as instance principals today. The dynamic group behind that arrangement uses a matching rule written on the compartment. To carry extra load next month the team will launch several more instances into the same compartment, and the batch jobs on them have to make the same API calls.
What IAM work do the new instances need?
a) No IAM change; the matching rule selects them too
b) An IAM policy statement naming each new instance as its subject
c) An entry for each instance; the group holds a member list
d) A fresh matching rule for the new instances
 
03. Instances in a private subnet collect vendor packages through a NAT gateway, and none of them carries a public IP address. An engineer proposes replacing the NAT gateway route with a route to the VCN's internet gateway, on the grounds that both gateways reach the same destinations and that one gateway is simpler to operate. The security team asks what the change would do in practice.
Which assessment of the proposal is correct?
a) The proposal removes the inbound exposure a NAT gateway leaves open
b) The instances lose their outbound path without a public IP
c) The change is safe as long as the subnet's egress rules stay narrow
d) Both gateways give a private subnet the same outbound internet access
 
04. Workloads in several spoke VCNs already reach an on-premises partner system through an OCI Network Firewall in the hub VCN, over the company's FastConnect circuit, and no part of that path touches the internet. The partner accepts sessions from one approved source address only. The spoke fleet scales through the day, so the private addresses its instances hold keep changing.
Which change lets the partner keep its single-address rule?
a) Route the spoke traffic through a NAT gateway before the firewall sees it
b) Reserve a public IP address for each spoke instance
c) Apply source NAT on the firewall so sessions leave with one address
d) Add an egress rule for the partner's address so the spoke tiers may send
 
05. Before a cutover an architect runs a Network Path Analyzer analysis between an application subnet and a database endpoint in a peered VCN, and it reports the path as permitted. After cutover the application still cannot open a connection, and the team asks whether the analysis had been wrong all along.
Which statement describes what that analysis covered?
a) It sent probe packets the destination answered, so the path is proven end to end
b) It confirmed the security rules on both subnets and left the VCN route tables unchecked
c) It replayed the flow log records written for that source
d) It evaluated the VCN configuration on that path, not what the host accepts
 
06. Members of the NetOps group raise a ticket. In the Prod compartment they can list and view subnets, route tables and security lists, and they can work with the VCN's existing resources, but every attempt to add an ingress rule to an existing security list is rejected as not authorized. The only statement covering them is attached in Prod:
Allow group NetOps to use virtual-network-family in compartment Prod
Which change lets them edit the security list rules while keeping the grant inside the Prod compartment?
a) Replace the verb with manage all-resources in the tenancy
b) Add a read statement for virtual-network-family in the tenancy
c) Add a statement granting manage on the security list resource type in Prod
d) Attach the same statement at the root compartment instead
 
07. An engineer is beginning a Zero Trust Packet Routing rollout in a tenancy that has never used it. The flows her applications depend on are documented and reviewed, and she opens a database endpoint to start labeling it. The console offers nothing to attach: the tenancy holds no security attribute she can select for the resource.
What has to be done before any resource in this tenancy can be labeled?
a) Reference an existing defined tag on the resource from the policy
b) Create a security attribute namespace and define the attributes in it
c) Write the ZPR policy, which creates the attribute it names
d) Move the resource into the compartment that the policy will name
 
08. Two companies merge and keep separate tenancies. A group named Ops in tenancy Alpha has to manage Object Storage in a compartment of tenancy Beta. The administrators of both tenancies have already bound the identifiers they need to aliases with define statements, and the compartment and the resource type are settled.
Which statements do the two administrators still have to write?
a) Alpha admits the group and Beta endorses it
b) Both tenancies write matching endorse statements
c) Beta alone writes an admit statement naming the Alpha group
d) Alpha endorses its group and Beta admits that group
 
09. Preparing for an external audit of a payment workload, a team downloads Oracle's third-party attestations and certifications from the OCI Compliance Documents service. It plans to hand them to the auditor as the evidence that the workload as a whole meets the required control set, and asks the security architect to confirm that reading.
How should the team characterize those documents?
a) They certify the tenancy's configuration, as well as the platform
b) They evidence the layers Oracle operates, not the tenancy's own configuration
c) They replace the tenancy's own evidence for every shared control
d) They cover any control the tenancy has enabled in the Console
 
10. A hub VCN runs an OCI Network Firewall that inspects the internet-bound traffic its spoke VCNs send across a DRG. The firewall's policy permits the destinations the workloads use, and the security rules on the firewall's subnet admit the traffic. The team is finishing the hub's own configuration.
What does the inspected traffic still need in order to leave the VCN for the internet?
a) A gateway to the internet that a route rule targets
b) An egress rule for every destination on the firewall subnet's security list
c) A route rule in each spoke sending internet traffic to its own NAT gateway
d) A public IP address on the instances whose traffic the firewall inspects

Answers:

Question: 01

Answer: b

Question: 02

Answer: a

Question: 03

Answer: b

Question: 04

Answer: c

Question: 05

Answer: d

Question: 06

Answer: c

Question: 07

Answer: b

Question: 08

Answer: d

Question: 09

Answer:b

Question: 10

Answer: a

 

Rating: 5 / 5 (80 votes)